cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
277
Views
0
Helpful
1
Replies

IOS IDS in 7206 Router

ishwar
Level 1
Level 1

Hi,

I have a cisco 7206 router. Its IOS version is c7200-jk9o3s-mz.122-12a.bin. I have enabled IDS in it. The config is as follows

ip audit notify log

ip audit po max-events 100

ip audit protected 202.52.224.1 to 202.52.255.254

ip audit smtp spam 25000

ip audit name mc_audit info action alarm

ip audit name mc_audit attack action alarm

But as soon as the audit is applied in the gateway serial interface with the following command, the mail server is affected and emails tricle into the server around 10 per minute.

The command is:

ip audit mc_audit in

What could be the problem???? Please suggest.

TIA,

Ishwars.

1 Reply 1

sirpa_k
Level 1
Level 1

Any update on this?